What's the status of istio with statefulsets? (especially MTLS with rabbitmq/ elasticsearch..)

#1

I’ve read several threads about istio and statefulset problems, that all ports for example should be exposed in order for the stateful set to work.

my use case is that i want to encrypt data between services, thus i want to enable a MeshPolicy for mtls, and enable ISTIO_MUTUAL using DestinationRules per services/namespaces etc…

For rabbitMQ it doesn’t work, i’ve seen some solutions that will allow istio sidecar injection, but without MTLS, and one that disables the MTLS for rabbitMQ.

i want to understand if i should rely on istio and continue try to make it work, or abandon it for now.

Any thoughts would be appriciated.

0 Likes